Set-CMCertificateProfileScep
Establece un perfil de certificado SCEP.
Syntax
Set-CMCertificateProfileScep
[-AllowCertificateOnAnyDevice <Boolean>]
[-CertificateStore <CertificateStoreType>]
[-CertificateTemplateName <String>]
[-CertificateValidityDays <Int32>]
[-Description <String>]
[-Eku <Hashtable>]
[-EnrollmentRenewThresholdPct <Int32>]
[-EnrollmentRetryCount <Int32>]
[-EnrollmentRetryDelayMins <Int32>]
[-HashAlgorithm <HashAlgorithmTypes>]
-InputObject <IResultObject>
[-KeySize <Int32>]
[-KeyStorageProvider <KeyStorageProviderSettingType>]
[-KeyUsage <X509KeyUsageFlags>]
[-NewName <String>]
[-PassThru]
[-RequireMultifactor <Boolean>]
[-RootCertificate <IResultObject>]
[-SanType <SubjectAlternativeNameFormatTypes>]
[-ScepServerUrl <String[]>]
[-SubjectType <SubjectNameFormatTypes>]
[-SupportedPlatform <IResultObject[]>]
[-DisableWildcardHandling]
[-ForceWildcardHandling]
[-WhatIf]
[-Confirm]
[<CommonParameters>] Set-CMCertificateProfileScep
[-AllowCertificateOnAnyDevice <Boolean>]
[-CertificateStore <CertificateStoreType>]
[-CertificateTemplateName <String>]
[-CertificateValidityDays <Int32>]
[-Description <String>]
[-Eku <Hashtable>]
[-EnrollmentRenewThresholdPct <Int32>]
[-EnrollmentRetryCount <Int32>]
[-EnrollmentRetryDelayMins <Int32>]
[-HashAlgorithm <HashAlgorithmTypes>]
-Id <Int32>
[-KeySize <Int32>]
[-KeyStorageProvider <KeyStorageProviderSettingType>]
[-KeyUsage <X509KeyUsageFlags>]
[-NewName <String>]
[-PassThru]
[-RequireMultifactor <Boolean>]
[-RootCertificate <IResultObject>]
[-SanType <SubjectAlternativeNameFormatTypes>]
[-ScepServerUrl <String[]>]
[-SubjectType <SubjectNameFormatTypes>]
[-SupportedPlatform <IResultObject[]>]
[-DisableWildcardHandling]
[-ForceWildcardHandling]
[-WhatIf]
[-Confirm]
[<CommonParameters>] Set-CMCertificateProfileScep
[-AllowCertificateOnAnyDevice <Boolean>]
[-CertificateStore <CertificateStoreType>]
[-CertificateTemplateName <String>]
[-CertificateValidityDays <Int32>]
[-Description <String>]
[-Eku <Hashtable>]
[-EnrollmentRenewThresholdPct <Int32>]
[-EnrollmentRetryCount <Int32>]
[-EnrollmentRetryDelayMins <Int32>]
[-HashAlgorithm <HashAlgorithmTypes>]
[-KeySize <Int32>]
[-KeyStorageProvider <KeyStorageProviderSettingType>]
[-KeyUsage <X509KeyUsageFlags>]
-Name <String>
[-NewName <String>]
[-PassThru]
[-RequireMultifactor <Boolean>]
[-RootCertificate <IResultObject>]
[-SanType <SubjectAlternativeNameFormatTypes>]
[-ScepServerUrl <String[]>]
[-SubjectType <SubjectNameFormatTypes>]
[-SupportedPlatform <IResultObject[]>]
[-DisableWildcardHandling]
[-ForceWildcardHandling]
[-WhatIf]
[-Confirm]
[<CommonParameters>] Description
El cmdlet Set-CMCertificateProfileScep actualiza la configuración de un perfil de certificado SCEP.
Nota:
Ejecute cmdlets de Configuration Manager desde la unidad de sitio Configuration Manager, por ejemploPS XYZ:\>. Para obtener más información, consulte Introducción.
Ejemplos
Ejemplo 1: Establecer un perfil de certificado SCEP por nombre
PS XYZ:\> Set-CMCertificateProfileScep -Name "TestProfile01" -CertificateStore Machine -Description "Test update" -HashAlgorithm SHA3 -KeySize 1024 -KeyUsage KeyEncipherment -NewName "TestProfile01_updated" -SanType SubjectAltRequireDnsEste comando actualiza el perfil de certificado SEP denominado TestProfile01 y le proporciona el nuevo nombre TestProfile01_updated.
Ejemplo 2: Establecer un perfil de certificado SCEP mediante la canalización
PS XYZ:\> Get-CMCertificateProfileScep -Name "TestProfile02" -Fast | Set-CMCertificateProfileScep -AllowCertificateOnAnyDevice $True -KeyStorageProvider InstallToNGC_FailIfNotPresentEste comando obtiene el objeto de perfil de certificado SEP denominado TestProfile02 y usa el operador de canalización para pasar el objeto a Set-CMCertificateProfileScep, que actualiza la configuración del objeto de perfil.
Parámetros
-AllowCertificateOnAnyDevice
Indica si se va a permitir la inscripción de certificados en cualquier dispositivo.
| Type: | Boolean |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-CertificateStore
Especifica el tipo de certificado. Los valores admitidos son:
- Equipo
- User
| Type: | CertificateStoreType |
| Accepted values: | Machine, User |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-CertificateTemplateName
Especifica el nombre de una plantilla de certificado.
| Type: | String |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-CertificateValidityDays
Especifica, en número de días, el período de validez del certificado.
| Type: | Int32 |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-Confirm
Solicitará confirmación antes de ejecutar el cmdlet.
| Type: | SwitchParameter |
| Aliases: | cf |
| Position: | Named |
| Default value: | False |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-Description
Especifica una descripción para el perfil de certificado SCEP.
| Type: | String |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-DisableWildcardHandling
Este parámetro trata los caracteres comodín como valores de caracteres literales. No se puede combinar con ForceWildcardHandling.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-Eku
Especifica el uso extendido de la clave. Los valores de la tabla hash definen el propósito previsto del certificado.
| Type: | Hashtable |
| Aliases: | Ekus |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-EnrollmentRenewThresholdPct
Especifica el porcentaje de duración del certificado que permanece antes de que el dispositivo solicite la renovación del certificado.
| Type: | Int32 |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-EnrollmentRetryCount
Especifica el número de veces que el dispositivo reintenta automáticamente la solicitud de certificado en el servidor que ejecuta el servicio de inscripción de dispositivos de red.
| Type: | Int32 |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-EnrollmentRetryDelayMins
Especifica el intervalo, en minutos, entre cada intento de inscripción cuando se usa la aprobación del administrador de CA antes de que la entidad de certificación emisora procese la solicitud de certificado.
| Type: | Int32 |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-ForceWildcardHandling
Este parámetro procesa caracteres comodín y puede provocar un comportamiento inesperado (no recomendado). No se puede combinar con DisableWildcardHandling.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-HashAlgorithm
Especifica el algoritmo hash. Los valores admitidos son:
- SHA1
- SHA2
- SHA3
- NINGUNO
| Type: | HashAlgorithmTypes |
| Aliases: | HashAlgorithms |
| Accepted values: | NONE, SHA1, SHA2, SHA3 |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-Id
Especifica el CI_ID de un perfil de certificado SCEP.
| Type: | Int32 |
| Aliases: | CI_ID, CIId |
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-InputObject
Especifica un objeto de perfil de certificado SCEP. Para obtener un objeto de perfil de certificado SCEP, use la función Get-CMCertificateProfileScep.
| Type: | IResultObject |
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | True |
| Accept wildcard characters: | False |
-KeySize
Especifica el tamaño de la clave. Los valores admitidos son:
- 1024
- 2048
| Type: | Int32 |
| Accepted values: | 1024, 2048, 4096 |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-KeyStorageProvider
Especifica el proveedor de almacenamiento de claves (KSP) para la inscripción de SCEP. Los valores admitidos son:
- Ninguno
- InstallToTPM_FailIfNotPresent
- InstallToTPM_IfPresent
- InstallToSoftwareKeyStorageProvider
- InstallToNGC_FailIfNotPresent
| Type: | KeyStorageProviderSettingType |
| Accepted values: | None, InstallToTPM_FailIfNotPresent, InstallToTPM_IfPresent, InstallToSoftwareKeyStorageProvider, InstallToNGC_FailIfNotPresent |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-KeyUsage
Especifica el uso de la clave para el certificado. Los valores admitidos son:
- KeyEncipherment
- DigitalSignature
- Ninguno
- EncipherOnly
- CrlSign
- KeyCertSign
- KeyAgreement
- DataEncipherment
- No repetición
- DecipherOnly
| Type: | X509KeyUsageFlags |
| Aliases: | KeyUsages |
| Accepted values: | KeyEncipherment, DigitalSignature |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-Name
Especifica un nombre para el perfil de certificado SCEP.
| Type: | String |
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-NewName
Especifica un nuevo nombre para el perfil de certificado SCEP.
| Type: | String |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-PassThru
Agregue este parámetro para devolver un objeto que represente el elemento con el que está trabajando. De forma predeterminada, este cmdlet no puede generar ninguna salida.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-RequireMultifactor
Indica que se requiere la autenticación multifactor durante la inscripción de dispositivos antes de emitir certificados a esos dispositivos. Este parámetro se puede usar cuando se establece el valor de InstallToNGC_FailIfNotPresent para el parámetro KeyStorageProvider .
| Type: | Boolean |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-RootCertificate
Especifica un objeto de certificado de ca raíz de confianza. Para obtener un certificado de entidad de certificación raíz de confianza, use la función Get-CMCertificateProfileTrustedRootCA.
| Type: | IResultObject |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-SanType
Especifica el nombre alternativo del firmante. Los valores admitidos son:
- SubjectAltRequireSpn
- SubjectAltRequireUpn
- SubjectAltReqiureEmail
- SubjectAltRequireDns
| Type: | SubjectAlternativeNameFormatTypes |
| Aliases: | SanTypes |
| Accepted values: | SubjectAltRequireCustom, SubjectAltRequireSpn, SubjectAltRequireAAD, SubjectAltRequireUpn, SubjectAltReqiureEmail, SubjectAltRequireDns |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-ScepServerUrl
Especifica una matriz de direcciones URL para los servidores del Servicio de inscripción de dispositivos de red (NDES) que emitirán certificados a través de SCEP.
| Type: | String[] |
| Aliases: | ScepServerUrls |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-SubjectType
Especifica el formato del nombre del firmante. Los valores admitidos son:
- SubjectRequireCommonNameAsEmail
- SubjectRequireCommonNameAsDeviceName
- SubjectRequireCommonNameAsOSName
- SubjectRequireCommonNameAsIMEI
- SubjectRequireCommonNameAsMEID
- SubjectRequireCommonNameAsSerialNumber
- SubjectRequireCommonNameAsDeviceType
- SubjectRequireCommonNameAsWiFiMAC
- SubjectRequireCommonNameAsEthernetMAC
- SubjectRequireAsCustomString
- SubjectRequireDnsAsCN
- SubjectRequireEmail
- SubjectRequireCommonName
- SubjectRequireDirectoryPath
| Type: | SubjectNameFormatTypes |
| Aliases: | SubjectTypes |
| Accepted values: | SubjectRequireCommonNameAsEmail, SubjectRequireCommonNameAsDeviceName, SubjectRequireCommonNameAsOSName, SubjectRequireCommonNameAsIMEI, SubjectRequireCommonNameAsMEID, SubjectRequireCommonNameAsSerialNumber, SubjectRequireCommonNameAsDeviceType, SubjectRequireCommonNameAsWiFiMAC, SubjectRequireCommonNameAsEthernetMAC, SubjectRequireAsCustomString, SubjectRequireDnsAsCN, SubjectRequireEmail, SubjectRequireCommonName, SubjectRequireDirectoryPath |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-SupportedPlatform
Especifica un objeto de plataforma compatible. Para obtener un objeto de plataforma compatible, use el cmdlet Get-CMSupportedPlatform.
| Type: | IResultObject[] |
| Aliases: | SupportedPlatforms |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-WhatIf
Muestra lo que ocurriría si se ejecuta el cmdlet. El cmdlet no se ejecuta.
| Type: | SwitchParameter |
| Aliases: | wi |
| Position: | Named |
| Default value: | False |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Entradas
Microsoft.ConfigurationManagement.ManagementProvider.IResultObject
Salidas
IResultObject
Vínculos relacionados
Comentarios
Próximamente: A lo largo de 2024 iremos eliminando gradualmente GitHub Issues como mecanismo de comentarios sobre el contenido y lo sustituiremos por un nuevo sistema de comentarios. Para más información, vea: https://aka.ms/ContentUserFeedback.
Enviar y ver comentarios de